Essential information

Value / Name

http://64.227.48.212/project/five/fre.php

Confidence

100/100

Revoked

Yes

Valid from

16/02/2024 11:47

Valid until

03/04/2024 12:47

Pattern type

stix

Published

20/12/2025 19:42

Modified

21/12/2025 03:15

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://64.227.48.212/project/five/fre.php']

Labels / Tags

Labels: agenttesla andromeda dropper info-stealer leonem loader lokibot multi-stage rat reflective loading remcos remloader sabsik snakelogger taskun upatre

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.